Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913CBB2/B40322303B1111EE9619BB80C4F9AE02/a4h-elixD-3igEteKeziwpnCf6E.mft
File:                     a4h-elixD-3igEteKeziwpnCf6E.mft (raw, json)
Hash identifier:          q06B6gDfwax7uqvLV/ouKpdgGzl3hPlHx/o4MPdcf2M=
Subject key identifier:   1D:90:57:C2:C3:F8:95:A1:84:C9:0C:C2:76:F9:99:9E:1C:FE:20:93
Authority key identifier: 6B:88:7E:7A:58:B1:0F:ED:E2:80:4B:5E:29:EC:E2:C2:99:C2:7F:A1
Certificate issuer:       /CN=A913CBB2/serialNumber=6B887E7A58B10FEDE2804B5E29ECE2C299C27FA1
Certificate serial:       016C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a4h-elixD-3igEteKeziwpnCf6E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913CBB2/B40322303B1111EE9619BB80C4F9AE02/a4h-elixD-3igEteKeziwpnCf6E.mft
Manifest number:          016A
Signing time:             Sat 19 Jul 2025 04:03:55 +0000
Manifest this update:     Sat 19 Jul 2025 04:03:54 +0000
Manifest next update:     Sat 26 Jul 2025 04:03:54 +0000
Files and hashes:         1: a4h-elixD-3igEteKeziwpnCf6E.crl (hash: wnOFqxH7MD/3gyCE0hfo6FNoAclebnl9vScXx8Rz77M=)
                          2: 26D3EB963B1211EE8ED76E25C4F9AE02.roa (hash: qv3tAt9BON7buTRTVhuMsm15F4b64BUNH1NHpvJGTQM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913CBB2/B40322303B1111EE9619BB80C4F9AE02/a4h-elixD-3igEteKeziwpnCf6E.crl
                          rsync://rpki.apnic.net/member_repository/A913CBB2/B40322303B1111EE9619BB80C4F9AE02/a4h-elixD-3igEteKeziwpnCf6E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a4h-elixD-3igEteKeziwpnCf6E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 04:03:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 364 (0x16c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913CBB2, serialNumber=6B887E7A58B10FEDE2804B5E29ECE2C299C27FA1
        Validity
            Not Before: Jul 19 04:03:54 2025 GMT
            Not After : Jul 26 04:03:54 2025 GMT
        Subject: CN=687b192b-6f65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a4:02:35:b8:ec:0d:fd:fb:9a:1e:fa:bf:76:
                    5c:e9:09:e5:95:30:1e:15:be:ad:eb:5f:67:9d:73:
                    61:89:f1:cd:10:2f:af:61:12:c7:31:11:d1:dc:4c:
                    0c:b3:db:73:b7:6b:38:81:c2:97:1f:81:71:a2:8a:
                    e3:d1:e0:77:18:55:dc:7c:fc:49:69:ad:36:fc:69:
                    11:e7:13:fa:66:06:8e:4b:58:c4:28:02:1d:a4:06:
                    bd:56:51:07:75:ce:e4:d4:1b:d2:7c:c4:da:b7:7b:
                    d6:9d:91:cd:ca:6c:c9:9c:49:39:f5:b9:8a:b1:35:
                    b2:76:83:cd:9a:f7:9b:84:4a:21:ce:01:af:f3:8d:
                    dc:c1:71:eb:8e:ce:24:06:9e:1d:84:bd:b8:90:cb:
                    8a:73:25:f0:63:fa:41:82:a1:85:e1:40:e4:37:2c:
                    97:5c:e7:c9:02:e1:03:af:47:0c:ff:57:30:dc:99:
                    40:3b:4f:95:6c:e1:bc:4f:68:30:d0:1b:af:f9:89:
                    50:01:71:00:26:72:6b:58:ce:dc:f3:99:28:cb:4c:
                    fd:50:dd:d0:54:a8:37:06:ca:9c:33:72:72:34:a3:
                    1c:a4:cf:be:19:df:f0:b1:2a:e3:c5:08:ad:fc:e9:
                    7f:ce:1f:e1:e3:3c:1e:46:31:65:a6:b1:14:ef:2c:
                    fa:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:90:57:C2:C3:F8:95:A1:84:C9:0C:C2:76:F9:99:9E:1C:FE:20:93
            X509v3 Authority Key Identifier:
                keyid:6B:88:7E:7A:58:B1:0F:ED:E2:80:4B:5E:29:EC:E2:C2:99:C2:7F:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913CBB2/B40322303B1111EE9619BB80C4F9AE02/a4h-elixD-3igEteKeziwpnCf6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a4h-elixD-3igEteKeziwpnCf6E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CBB2/B40322303B1111EE9619BB80C4F9AE02/a4h-elixD-3igEteKeziwpnCf6E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:c2:89:c1:32:0f:56:a9:73:d1:d7:92:78:a4:37:a1:47:f4:
         d3:f9:b8:84:04:a0:da:a4:e1:7e:a5:93:f8:6c:a1:c5:b9:39:
         69:57:4d:5c:9c:8c:fe:03:63:79:6c:e1:31:65:5e:6c:2c:bf:
         f3:34:10:63:04:79:0a:81:a3:8c:16:1a:bb:8c:49:e9:bb:67:
         42:16:08:38:e2:4b:5d:fa:87:7a:6b:32:79:04:63:dc:3e:a9:
         6c:20:9f:a5:f7:da:ad:08:8e:df:90:b6:b4:cd:14:ec:ab:f6:
         04:08:8b:4f:36:17:16:dd:ea:98:2a:4e:6b:00:07:e0:cc:5a:
         a0:26:b0:5b:4e:1a:30:81:e4:ce:3f:a2:06:13:e5:9e:a3:3a:
         cf:f8:29:df:bf:35:0e:c4:8a:56:fd:70:1f:89:a9:76:a2:72:
         a7:56:da:37:5d:8f:fe:48:c5:73:f9:0f:0a:b5:5f:25:24:29:
         91:6a:d8:de:bf:e8:12:77:92:a6:cf:13:2a:d8:fc:1b:df:d8:
         49:89:1b:12:bf:db:3b:d1:35:6f:80:fa:4c:c2:e5:29:bf:93:
         c4:e7:eb:fc:e2:bd:e4:1c:d8:5b:9a:d6:1f:91:22:bd:8d:ad:
         d4:8d:56:09:24:52:84:7c:9b:05:1f:eb:1a:63:f2:42:62:e1:
         e3:11:2a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 07:45:04 2025 by rpki-client